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Abstract 

We investigate the problem of reasoning in the propositional fragment of MBNF, the 
logic of minimal belief and negation as failure introduced by Lifschitz, which can be con- 
sidered as a unifying framework for several nonmonotonic formalisms, including default 
logic, autoepistemic logic, circumscription, epistemic queries, and logic programming. We 
characterize the complexity and provide algorithms for reasoning in propositional MBNF. 
In particular, we show that skeptical entailment in propositional MBNF is Ilg-complete, 
hence it is harder than reasoning in all the above mentioned propositional formalisms for 
nonmonotonic reasoning. We also prove the exact correspondence between negation as 
failure in MBNF and negative introspection in Moore's autoepistemic logic. 



1. Introduction 

Research in the formalization of commonsense reasoning has pointed out the need of for- 
malizing agents able to reason introspectively about their own knowledge and ignorance 
(Moore, 1985; Levesque, 1990). Modal epistemic logics have thus been proposed, in which 
modalities are interpreted in terms of knowledge or belief. Generally speaking, the conclu- 
sions an introspective agent is able to draw depend on both what she knows and what she 
does not know. Hence, any such conclusion may be retracted when new facts are added to 
the agent's knowledge. For this reason, many nonmonotonic modal formalisms have been 
proposed in order to characterize the reasoning abilities of an introspective agent. 

Among the nonmonotonic modal logics proposed in the literature, the logic of minimal 
belief and negation as failure MBNF (Lifschitz, 1991, 1994) is one of the most studied for- 
malisms (Chen, 1994; Bochman, 1995; Beringer & Schaub, 1993). Roughly speaking, such 
a logic is built by adding to first-order logic two distinct modalities, a "minimal belief" 
modality B and a "negation as failure" modality not. The logic thus obtained is char- 
acterized in terms of a nice model-theoretic semantics. MBNF has been used in order to 
give a declarative semantics to very general classes of logic programs (Lifschitz & Woo, 
1992; Schwarz &: Lifschitz, 1993; Inoue &: Sakama, 1994), which generalize the stable model 
semantics of negation as failure in logic programming (Gelfond & Lifschitz, 1988, 1990, 
1991). Also, MBNF can be viewed as an extension of the theory of epistemic queries to 
databases (Reiter, 1990), which deals with the problem of querying a first-order database 
about its own knowledge. Due to its ability of expressing many features of nonmonotonic 
logics (Lifschitz, 1994; Schwarz &: Lifschitz, 1993), MBNF is generally considered as a unify- 
ing framework for several nonmonotonic formalisms, including default logic, autoepistemic 
logic, circumscription, epistemic queries, and logic programming. 
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Although several aspects of the logic MBNF have been thoroughly investigated (Schwarz 
h Lifschitz, 1993; Chen, 1994; Bochman, 1995), the existing studies concerning the com- 
putational properties of MBNF are limited to subclasses of propositional MBNF theories 
(Inoue &: Sakama, 1994) or to a very restricted subset of the first-order case (Beringer &: 
Schaub, 1993). 

In this paper we present a computational characterization of deduction in the proposi- 
tional fragment of MBNF. In particular, we show that logical implication in the proposi- 
tional fragment of MBNF is a Ilg-complete problem: hence, it is harder (unless the poly- 
nomial hierarchy collapses) than reasoning in all the best known propositional formalisms 
for nonmonotonic reasoning, like autoepistemic logic (Niemela, 1992; Gottlob, 1992), de- 
fault logic (Gottlob, 1992), circumscription (Eiter & Gottlob, 1993), (disjunctive) logic 
programming (Eiter & Gottlob, 1995), and several McDermott and Doyle's logics (Marek 
&: Truszczynski, 1993). As shown in the following, this result also implies that minimal 
knowledge is computationally harder than negation as failure. 

Moreover, we study the subclass of flat MBNF theories, i.e. MBNF theories with- 
out nested occurrences of modalities, showing that in this case logical implication is Ilg- 
complete. This case is the most interesting one from the logic programming viewpoint. 
Indeed, it implies that, under the stable model semantics, increasing the syntax of program 
rules, by allowing propositional formulas as goals in the rules, does not affect the worst-case 
complexity of query answering for disjunctive logic programs with negation as failure. 

Furthermore, we provide algorithms for reasoning both in MBNF and in its flat fragment, 
which are optimal with respect to worst-case complexity. Notably, such deductive methods 
can be considered as generalizations of known methods for reasoning in nonmonotonic 
formalisms such as default logic, autoepistemic logic, and logic programming under stable 
model semantics. 

We also show that the "negation as failure" modality in MBNF exactly corresponds 
to negative introspection in autoepistemic logic (Moore, 1985). This result implies that 
the logic MBNF can be considered as the "composition" of two epistemic modalities: the 
"minimal knowledge" operator due to Halpern and Moses (1985) and Moore's autoepistemic 
operator. 

Besides its theoretical interest, we believe that such a computational and epistemological 
analysis of MBNF has interesting implications for the development of knowledge represen- 
tation systems with nonmonotonic abilities, since it allows for a better understanding and 
comparison of the different nonmonotonic formalisms captured by MBNF. The interest in 
defining deductive methods for MBNF also arises from the fact that such a logic, originally 
developed as a framework for the comparison of different logical approaches to nonmono- 
tonic reasoning, has recently been considered as an attractive knowledge representation 
formalism. In particular, it has been shown (Donini, Nardi, & Rosati, 1997a) that the full 
power of MBNF is necessary in order to logically formalize several features of implemented 
frame-based knowledge representation systems. 

In the following, we first briefly recall the logic MBNF. In Section 3 we address the 
relationship between MBNF and Moore's autoepistemic logic. Then, in Section 4 we study 
the problem of reasoning in propositional MBNF: we flrst consider the case of general MBNF 
theories, then we deal with flat MBNF theories. In Section 5 we present the computational 
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characterization of reasoning in MBNF. We conclude in Section 6. This paper is an extended 
and thoroughly revised version of (Rosati, 1997). 

2. The Logic MBNF 

In this section we briefly recall the logic MBNF (Lifschitz, 1994), which is a modal logic 
with two epistemic operators: a "minimal belief" modality B and a "negation as failure" 
(also called "negation by default") modality not. We use C to denote a fixed propositional 
language built in the usual way from: (i) an alphabet A of propositional symbols; (ii) the 
symbols true, false; (iii) the propositional connectives V,A,-i,D. We denote as Cm the 
modal extension of C with the modalities B and not. We say that a formula (p G Cm 
has (modal) depth i (with i > 0) if each subformula in (p lies within the scope of at most 
i modalities, and there exists a subformula in (p which lies within the scope of exactly i 
modalities. 

We denote as Cf^ the set of subjective MBNF formulas, i.e. the subset of formulas from 
Cm in which each occurrence of a propositional symbol lies within the scope of at least one 
modality, and with C\^ the set of flat MBNF formulas, that is the set of formulas from Cm 
in which each propositional symbol lies within the scope of exactly one modality. We call a 
modal formula (p from Cm positive (resp. negative) if the modality not (resp. B) does not 
occur in ip. Cb denotes the set of positive formulas from Cmi while C^ denotes the set of 
positive formulas from C^f^. 

We now recall the notion of MBNF model. An interpretation is a set of propositional 
symbols. An MBNF structure is a triple (/, M^, M„), where / is an interpretation (also called 
initial world) and Mf,,Mn are non-empty sets of interpretations (worlds). Satisfiability of a 
formula in an MBNF structure is defined inductively as follows: 

1. if is a propositional symbol, (p is satisfied by (7, Mi,, M„) iff (/9 G /; 

2. is satisfied by (7, M^, M„) iff (p is not satisfied by (7, M^, M„); 

3. (pi A (p2 is satisfied by (7, Mf,, M„) iff (pi is satisfied by (7, Mf,, M„) and (p2 is satisfied 
by {I,Mb,Mn); 

4. (pi V (p2 is satisfied by (7, M6,M„) iff either (pi is satisfied by {I, Mf,, Mn) or (p2 is 
satisfied by (7,Mb,M„); 

5. (pi D (p2 is satisfied by (7, Mb,M„) iff either (pi is not satisfied by {I,Mi„Mn) or (p2 
is satisfied by (7, Mf,, Mn); 

6. B(p is satisfied by {I,Mf„Mn) iff, for every J G Mf,, (p is satisfied by (J, Mb,M„); 

7. not (p is satisfied by (7, Mf,, M„) iff there exists J G M„ such that (p is not satisfied by 
(J,M6,M„). 

We write {I, Mf,, M^) |= (p to indicate that (p is satisfied by {I, Mf,, M^). We say that 
a theory S C Cm is satisfied by {I, Mf,, Mn) (and write {I, Mf,, Mn) \= S) iff each formula 
from S is satisfied by {I, Mf,, Mn). If G Cfj, then the evaluation of (p is insensitive to 
the initial interpretation 7: thus, in this case we also write (Mh,M„) |= ip. Analogously, if 
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G then the evaluation of is insensitive both to the initial interpretation / and to 
the set M„, and we also write M;, \= ^. If G £ then the evaluation of does not depend 
on the sets M^, M„, and in this case we write / |= i^. 

In order to relate MBNF structures to standard interpretation structures in modal 
logic (i.e. Kripke structures), we remark that, due to the above notion of satisfiability, 
we can consider the sets M^, M„ in an MBNF interpretation structure as two distinct 
universal Kripke structures, i.e. possible-world structures in which each world is connected 
to all worlds of the structure. In fact, since the accessibility relation in such a structure is 
universal, without loss of generality it is possible to identify a universal Kripke structure 
with the set of interpretations contained in it. We recall that the class of universal Kripke 
structures characterizes the logic S5 (Marek Sz Truszczyhski, 1993, Theorem 7.52). 

The nonmonotonic character of MBNF is obtained by imposing the following preference 
semantics over the interpretation structures satisfying a given theory. 

Definition 2.1 A structure {I,M,M), where M ^ 9, is an MBNF model of a theory 
S C Cm iff {I, M) \= S and, for each interpretation J and for each set of interpretations 
M', ifM'DM then {J,M',M) ^ S. 

We say that a formula (p is entailed (or logically implied) by S in MBNF (and write 
S |=MBNF 'p) iff is satisfied by every MBNF model of S. In order to simplify notation, 
we denote the MBNF model (/,M, M) with the pair (/,M), and, if S G Cf^, we denote 
(/, M, M) with M, since in this case the evaluation of E is insensitive to the initial world /, 
namely, if (/, M) is a model for S, then, for each interpretation J, (J, M) is a model for S. 

Example 2.2 Let S = {Bp}. The only MBNF models for S are of the form (/, M), with 

M = {I : I \= p}. Hence, S |=mbnf Bp, and S |=mbnf ~'Bip for each ip E C such that the 
propositional formula p D ip is not valid. Therefore, the agent modeled by S has minimal 
belief, in the sense that she only believes p and the objective facts logically implied by p. □ 



Example 2.3 Let S = {not married D B hasNoChildren}. It is easy to see that the only 
models for S are of the form (/, M) such that M = {I : I \= hasNoChildren}, since married 
can be assumed not to hold by the agent modeled by S, which is then able to conclude 
B hasNoChildren. Notably, the meaning of S is analogous to the default rule hasNoChildren 
Reiter's default logic (Lifschitz, 1994). Also, let S = {B bird A not^ flies D B flies, B bird}. 
In a way analogous to the previous case, it can be shown that the only MBNF models for 
S are of the form (/, M), with M = {I : I \= bird A flies}. Therefore, S |=mbnf B flies. As 
shown by Lifschitz (1994), S corresponds to the default theory ({-^^^i^}, bird). □ 



Given a set of interpretations M, Th{M) denotes the set of formulas B(p such that 
B(p G Cb and M |= B(p. Let Mi,M2 be sets of interpretations. We say that Mi is 
equivalent to M2 iff T/i(Mi) = Th{M2). 

Definition 2.4 A set of interpretations M is maximal iff, for each set of interpretations 
M', if M' is equivalent to M then M' CM. 
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It turns out that, when restricting to theories composed of subjective positive formulas, 
MBNF corresponds to the modal logic of minimal knowledge due to Halpern and Moses 
(1985), also known as ground nonmonotonic modal logic S5g (Kaminski, 1991; Donini, 
Nardi, &: Rosati, 1997b). In fact, S5g is obtained from modal logic S5 by imposing the 
following preference order over the universal Kripke structures satisfying a theory S G £5: 
M is a model for S iff M |= S and, for each M', if M' ^ S then M' ^ M (Shoham, 
1987). In fact, it is immediate to see that the MBNF semantics of theories composed of 
subjective positive formulas corresponds to the above semantics according to S5g- Hence, 
the following property holds. 

Proposition 2.5 Let S C C^- Then, M is an S5g model for S iff, for each I, {I,M) is 
an MBNF model for {B(p : 93 G S}. 

The previous proposition implies that, when S C a set of interpretations M sat- 
isfying S is compared with all other sets of interpretations satisfying S, while, in the case 
S C Cm J M is only compared with the sets M' such that (M', M) satisfies S. 

Hence, the main difference between MBNF and SSq lies in the fact that in S5g all models 
are maximal with respect to set containment (or minimal with respect to the objective 
knowledge which holds in the model), while in MBNF this property is not generally true. 
E.g., the theory S = {not married V B married} has two types of models, for each possible 
choice of the initial world J: (J, Mi), where Mi corresponds to the set of all interpretations 
(which represents the case in which married is not assumed to hold); and (J, M2), where 
M2 = {/ : / 1= married}. Namely, if married is assumed to hold, then S forces one to 
conclude B married: that is, the initial assumption is justified by the knowledge derived on 
the basis of such an assumption (Lin &; Shoham, 1992). We remark that, by Proposition 2.5, 
the interpretation of the MBNF operator B exactly corresponds to the interpretation of the 
modality B in S5g- 

3. Relating MBNF to Autoepistemic Logic 

In this section we study the relationship between autoepistemic logic and MBNF. First, we 
briefly recall Moore's autoepistemic logic (AEL). In order to keep notation to a minimum, 
we change the language of AEL, using the modality B instead of L. Thus, in the following 
a formula of AEL is a formula from Cb- 

Definition 3.1 A propositionally consistent set of formulas T C Cb is a stable expansion 
for a set of initial knowledge C Cb if T satisfies the following equation: 

T = Cn{EU{Bip\ipeT}U{^Bip\ip0T}) (1) 

where Cn{S) denotes the propositional deductive closure of the modal theory S C Cb- 

Given a theory S C Cb and a formula (fi G Cb, we write S |=ael f ^fi belongs to 
all the stable expansions of S. Each stable expansion T is a stable set according to the 
following deflnition (Stalnaker, 1993). 

Definition 3.2 A modal theory T C Cb is a stable set if 
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1. T = Cn{T); 

2. for every G Cb, if (p &T then B(p G T; 

3. for every (p G Cb, if (fi ^ T then -^B(p G T. 

We recall that a stable set T corresponds to a maximal universal Kripke structure Mt 
such that T is the set of formulas satisfied by Mt (Marek Sz Truszczyhski, 1993). With the 
term AEL model for S we will thus refer to a set of interpretations M whose set of theorems 
Th{M) corresponds to a stable expansion for S in AEL. 

Finally, notice that we have adopted the notion of consistent autoepistemic logic (Marek 
&: Truszczyhski, 1993), i.e. in (1) we do not allow the inconsistent theory T = Cb composed 
of all modal formulas to be a (possible) stable expansion. The results presented in this 
section can be easily extended to this case (corresponding to Moore's original proposal): 
however, this requires to slightly change the semantics of MBNF, allowing in Definition 2.1 
the empty set of interpretations to be a possible component of MBNF structures. 

In the following, we use the term embedding (or translation) to indicate a transformation 
function t(-) for modal theories. We are interested in finding a faithful embedding (Gottlob, 
1995; Schwarz, 1996; Janhunen, 1998), in the following sense: r(-) is a faithful embedding 
of AEL into MBNF if, for each theory E C Cb and for each model M, M is an AEL model 
for S iflF M is an MBNF model for r(S). 

It is already known that AEL theories can be embedded into MBNF theories. In par- 
ticular, it has been proven (Lin & Shoham, 1992; Schwarz &; Truszczynski, 1994) that AEL 
theories with no nested occurrences of B (called fiat theories) can be embedded into MBNF; 
now, since in AEL any theory can be transformed into an equivalent fiat theory (which has 
in general size exponential in the size of the initial theory), it follows that any AEL theory 
can be embedded into MBNF. 

However, we now prove a much stronger result: negation as failure in MBNF exactly 
corresponds to negative introspection in AEL, i.e. AEL's modality ^B and MBNF's modal- 
ity not are semantically equivalent. Hence, such a correspondence is not only limited to 
modal theories without nested modalities, and induces a polynomial-time embedding of any 
AEL theory into MBNF. 

We first define the translation r(-) of modal theories from AEL to MBNF theories. 

Definition 3.3 Let (p G Cb- Then, T{(p) is the MBNF formula obtained from (p by substi- 
tuting each occurrence of B with -^not. Moreover, ifT,C Cb, then t(S) denotes the MBNF 
theory {BT{ip)\ip G S}. 

We now show that the translation t(-) embeds AEL theories into MBNF. To this aim, we 
exploit the semantic characterization of AEL defined by Schwarz (1992). Roughly speaking, 
according to such a preference semantics over possible-world structures, an AEL model for 
S is a set of interpretations M satisfying S such that, for any interpretation J not contained 
in M, the pair {J,M) does not satisfy S. Formally: 

Proposition 3.4 (Schwarz, 1992, Proposition 4-1) Let S C Cb- Then, M is an AEL 
model for S iff, for each interpretation I G M, {I, M) |= S and, for each interpretation 
J ^M, {J,M) ^ S. 
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In the following, we say that an occurrence of a subformula in a formula (p G Cm is 
strict if it does not lie within the scope of a modal operator. E.g., let a = B(p Anot{Bip\/ 
The occurrence of B(p in a is strict, while the occurrence of Btp is not strict. 

Theorem 3.5 Let S C C^- Then, M is an AEL model for S iff, for each I, (/, M) is an 
MBNF model o/t(S). 

Proof. If part. Suppose (/, M) is an MBNF model of t(S). Then, for each M' D M, 
(M', M) ^ t(S). Since t(S) is a set of formulas of the form B(p, where (p does not contain 
any occurrence of the operator B, it follows that, for each subformula of the form not (p 
occurring in r(S), (M', M) |= not (p iff (M, M) |= not (p. Now let B(p G r(S), let denote 
the propositional formula obtained from (p by replacing each strict occurrence in of a 
formula of the form not tp with true if (M, M) |= not tp and with false otherwise, and let 
S' = {(p' : Blp E t(S)}. Now suppose there exists an interpretation J such that J |= S' 
and J ^ M. Then, from the definition of satisfiability in MBNF structures it follows that 
{M\J{J},M) ^ r(S), thus contradicting the hypothesis that {I,M) is an MBNF model for 
t(S). Hence, M = {I : I \= S'}. Now consider a pair {J,M): again, from the definition of 
satisfiability in MBNF structures it follows immediately that (J, M) |= S iff J |= S'. And 
since M contains all the interpretations satisfying S', it follows that, for each interpretation 
J ^ M, (J, M) ^ S, therefore by Proposition 3.4 it follows that M is an AEL model for S. 

Only-if part. Suppose M is an AEL model for S. Then, by Proposition 3.4, for each 
interpretation / G M, (7, M) |= S and, for each interpretation J M, (J, M) ^ E. For 
each G S, let <^" denote the propositional formula obtained from ip by replacing each strict 
occurrence of a formula of the form Bip with true if M |= Btp and with false otherwise, and 
let S" = {ip" : ip G S}. Then, suppose there exists an interpretation J such that J |= S" 
and J M. Then, from the definition of satisfiability in MBNF structures it follows that 
(J, M) 1= S, thus contradicting the hypothesis that M is an AEL model for S. Hence, 
M = {I : I \= S"}. Now suppose that, for some interpretation 7, {I,M) is not an MBNF 
model for r(S). Then, there exists M' D M such that (M', M) \= r(S). From the definition 
of t(-), it follows that each interpretation in M' satisfies E", and, since M' D M, there exists 
J ^ M such that J ^ S". Contradiction. Therefore, (7, M) is an MBNF model for E. □ 

We remark that the above theorem could alternatively be proved from the fact that 
the 7C-free fragment of the logic MKNF (Lifschitz, 1991) is equivalent to AEL, which is 
stated (although without proof) by Schwarz and Truszczynski (1994, page 123), and from 
the correspondence between MBNF and MKNF (Lifschitz, 1994). 

The previous theorem implies that the interpretation of the modality not in MBNF and 
of the modal operator in autoepistemic logic are the same. This property extends previous 
results relating MBNF with AEL (Lin k Shoham, 1992; Schwarz k Lifschitz, 1993; Chen, 
1994), and has interesting consequences both in the logic programming framework and in 
nonmonotonic reasoning. In particular, since MBNF generalizes the stable model semantics 
for logic programs (Gelfond & Lifschitz, 1988), the above result strengthens the idea that 
AEL is the true logic of negation as failure (as interpreted according to the stable model 
semantics). Moreover, positive theories have the same interpretation both in MBNF and 
in the logic of minimal knowledge S5g (Halpern & Moses, 1985): consequently, the logic 
MBNF generalizes both Halpern and Moses' S5g and Moore's AEL. 
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4. Reasoning in MBNF 

In this section we present algorithms for reasoning in propositional MBNF: in particular, we 
study the entailment problem in MBNF. From now on, we assume to deal with finite MBNF 
theories S, therefore we refer to a single formula a (which corresponds to the conjunction 
of all the formulas contained in the finite theory S). 

4.1 Characterizing MBNF Models 

We now present a finite characterization of the MBNF models of a formula a G Cm- As 
in several methods for reasoning in nonmonotonic modal logics (Gottlob, 1992; Marek 
& Truszczyhski, 1993; Eiter k Gottlob, 1992; Niemela, 1992; Donini et al., 1997b), the 
technique we employ is based on the definition of a correspondence between the preferred 
models of a theory and the partitions of the set of modal subformulas of the theory. In 
fact, such partitions can be used in order to provide a finite characterization of a universal 
Kripke structure: specifically, a partition satisfying certain properties identifies a particular 
universal Kripke structure M, by uniquely determining a propositional theory such that M 
is the set of all interpretations satisfying such a theory. 

We extend such known techniques in order to deal with the preference semantics of 
MBNF. In particular, we characterize the properties that a partition of modal subformulas 
of a formula a G Cm niust satisfy in order to identify an MBNF model for a. In this way, 
we provide a method that does not rely on a modal logic theorem prover, but reduces the 
problem of reasoning in a bimodal logic to a number of reasoning problems in propositional 
logic. 

First, we introduce some preliminary definitions. We call a formula of the form B(f or 
not (p, with (p G Cm, a modal atom. 

Definition 4.1 Let a G Cm- We call the set of modal atoms occurring in a the modal 
atoms of a (and denote such a set as MA{cr)). 

Definition 4.2 Let a E Cm and let (P, N) be a partition of a set of modal atoms. We 
denote as cr{P, N) the formula obtained from a by substituting each strict occurrence in a 
of a formula in P with true, and each strict occurrence in a of a formula in N with false. 

Observe that only the occurrences in a of modal subformulas which are not within the 
scope of another modality are replaced; notice also that, if P U iV contains MA{a), then 
(t(P, N) is a propositional formula. In this case, the pair (P, N) identifies a guess on the 
modal subformulas from a, i.e. P contains the modal subformulas of a assumed to hold, 
while N contains the modal subformulas of a assumed not to hold. 

Definition 4.3 Let a G Cm and let (P, N) be a partition of MA{u). We denote as ob{P, N) 
the propositional formula 

ob{P,N)= /\ ^{P,N) 
BipeP 

Roughly speaking, the propositional formula ob{P,N) represents the "objective knowl- 
edge" implied by the guess (P, N) on the formulas of the form B(p belonging to P. From the 
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semantic viewpoint, in each structure {I,M,M') satisfying the guess on the modal atoms 
given by {P,N), the prepositional formula ob{P,N) constrains the interpretations of M, 
since in each such structure the prepositional formula ob{P,N) must be satisfied by each 
interpretation J G M, i.e. J |= ob{P,N). 

Example 4.4 Let 

cr = {Ba V not{b Ac)) Ad A ^B{^f V g) 
Then, MA{a) = {Ba, not{b A c),B{^f V g)}. Now suppose that 

P = {Ba,not{b Ac)} 
N = {Bi^fVg)} 

Then, a{P, N) = (true V true) Ad A -ifalse (which is equivalent to d), and ob{P, N) = a. □ 



Definition 4.5 We say that a pair of sets of interpretations (M, M') induces the partition 
(P, N) of MA{a) if, for each modal atom ^ G MA{a), ^ e P iff (M, M') \= ^. 

Lemma 4.6 Let (p G Cm, 1st I be an interpretation, let M, M' be sets of interpretations, 
and let {P,N) be the partition induced by (M, M') on a set of modal atoms S. Then, 
{I, M, M') 1= ^ iff {I, M, M') h 'PiP, N). 

Proof. Follows immediately from Definitions 4.2 and 4.5, and from the definition of 
satisfiability in MBNF structures. □ 

We now show that, if (I, M) is an MBNF model for a which induces the partition (P, N) 
of M^(S), then the formula ob{P,N) completely characterizes the set of interpretations 
M. 

Theorem 4.7 Let a e Cm, let {L,M) be an MBNF model for a, and let {P,N) be the 
partition of MA{a) induced by {M,M). Then, M = {J : J \= ob{P,N)}. 

Proof. Let M' = {J : J \= ob{P,N)}. Since (M, M) induces the partition (P,iV), by 
Definition 4.5 it follows that each interpretation in M must satisfy o6(P, N), hence M C M'. 
Now suppose M C M', and consider the structure {I,M' ,M). We prove that each modal 
atom ^ G MA{a) belongs to P iff (/, M' , M) |= ^. The proof is by induction on the depth 
of formulas in MA{a). 

First, consider a modal atom not tp such that tp E C: from the definition of satisfiability 
of a formula in an MBNF structure, it follows immediately that not ^ G P iff (/, M', M) \= 
not ij). Then, consider a modal atom Bij) such that ij) E C: \i Bij) G P, then, by definition of 
ob{P,N), the prepositional formula ob{P,N) D tp is valid, therefore {I,M',M) \= Btp. If 
Btp G N, then there exists an interpretation J in M such that J ^ tp, and since M' D M, 
it follows that {I,M',M) ^ Btp. Hence, each modal atom ^ G MA{a) of depth 1 belongs 
to P iff (/,M',M) 1= ^. 

Suppose now that ^ G P iff (/, M', M) \= ^ for each modal atom ^ in MA{a) of depth 
less or equal to i. Consider a modal atom Btp of MA{a) of depth i + 1: by the induction 
hypothesis, and by Lemma 4.6, {I,M',M) |= B^p iff M' \= B{7p{P,N)). Now, if P^ G P, 
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then, by definition of ob{P, N), the propositional formula ob{P, N) D ^(-P, N) is vaUd, and 
since M' = {J : J ^ ob{P,N)}, it follows that M' ^ B{ip{P,N)), which in turn implies 
(/, M' , M) \= Bip; on the other hand, if Btp G N, then there exists an interpretation J in M 
such that (J, M, M) ^ tp, hence, by the induction hypothesis and Lemma 4.6, J ^ "tpiP, N). 
Now, since M' D M, it follows that M' ^ B{xp{P,N)), hence (/,M',M) ^ S^. In the 
same way it is possible to show that a modal atom of the form not ij) of depth i + 1 belongs 
to P iff {I,M',M) 1= nottp. 

We have thus proved that each modal atom ^ G MA{a) belongs to P iff (I, M', M) |= ^: 
this in turn implies that (/, M', M) \= a iS I \= a{P, N), and since by hypothesis (/, M, M) 
satisfies a and {P,N) is the partition of M^(I]) induced by (M, M), by Lemma 4.6 it 
follows that / 1= a{P,N). Therefore, {I,M',M) \= a, which contradicts the hypothesis 
that (/, M) is an MBNF model for a. Consequently, M' = M, which proves the thesis. □ 

Informally, the above theorem states that each MBNF model for a can be associated with 
a partition {P,N) of the modal atoms of c?-; moreover, the propositional formula ob{P,N) 
exactly characterizes the set of interpretations M of an MBNF model (/, M), in the sense 
that M is the set of all interpretations satisfying ob{P,N). This provides a finite way to 
describe all MBNF models for a. 

We now define the notion of a partition of a set of modal atoms induced by a pair of 
propositional formulas. 

Definition 4.8 Let a G Cm, fi,V2 £ C. We denote as Prt{a,(pi,(p2) the partition of 
MA{a) induced by (Mi, M2), where Mi = {I : I \= (pi}, M2 = {/ : / |= 1P2}. 

In order to simplify notation, we denote as Prt{a,(p) the partition Prt{a,(p,(p). The 
following theorem provides a constructive way to build the partition Prt{a, ip, ip). 

Theorem 4.9 Let a G Cm, fjip & C. Let (P, N) be the partition of MA{a) built as follows: 

1. start from P = N = ^; 

2. for each modal atom B^ in MA{a) such that ^{P, N) G C, if the propositional formula 
(f D ^{P,N) is valid, then add B^ to P, otherwise add B^ to N; 

3. for each modal atom not ^ in MA{a) such that ^{P,N) G C, if the propositional 
formula tp D ^{P,N) is not valid, then add not ^ to P, otherwise add not ^ to N; 

4- iteratively apply the above rules until P U N = MA{a). 

Then, {P,N) = Prt{a,^,ip). 

Proof. The proof is by induction on the structure of the formulas in MA{a). First, 
from the fact that Prt{a^ip,'tp) is the partition induced by (M, M'), with M = {I : I \= 
(f}, M' = {/ : / 1= tp}, and from the definition of satisfiability in MBNF structures, it 
follows that, if ^ G £, then (M, M') |= B^ if and only if D ^ is a valid propositional 
formula, and (M, M') \= not ^ if and only if 1/^ D ^ is not a valid propositional formula. 
Therefore, {P,N) agrees with Prt{a,Lp,ip) on all modal atoms of modal depth 1. Suppose 
now that {P,N) and Prt{a,(p,tp) agree on all modal atoms of modal depth less or equal 
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to i. Consider a modal atom of MA{a) of modal depth i + 1. Prom Lemma 4.6 and 
from the definition of satisfiability in MBNF structures, it follows that (M, M') |= if 
and only if (f D ^{Prt{a, (p, tp)) is a valid propositional formula, and since by Definition 4.2 
the value of the formula ^{Prt{a,(f,ip)) only depends on the guess of the modal atoms of 
modal depth less or equal to i in Prt{a,(p,ip), by the induction hypothesis it follows that 
^{Prt{a, if, tp)) = ^{P, N), hence belongs to P if and only if (M, M') |= B^. Analogously, 
it can be proven that any modal atom of depth i + 1 of the form not ^ belongs to P if and 
only if (M, M') |= not ^. Therefore, {P-,N) and Prt{a,(p,tp) agree on all modal atoms of 
modal depth i + 1. □ 

The algorithms we present in the following for reasoning in MBNF use the above shown 
properties of partitions of modal subformulas of a formula a, together with additional 
conditions on such partitions (that vary according to the different classes of theories accepted 
as inputs), in order to identify all the MBNF models for a. 

As for the entailment problem a |=mbnf '^^ point out that the occurrences of not in 
(f are equivalent to occurrences of -i-B, since in each MBNF model for a both modalities in 
ip are evaluated on the same set of interpretations. Therefore, as in the original formulation 
of MBNF (Lifschitz, 1994), we restrict query answering in MBNF to positive formulas. 

Let (f G Cb, ip ^ C, and M = {J : J \= ip}. We denote as (p{ip) the propositional 
formula obtained from ip by substituting each strict occurrence of a modal atom B^ of 
(f with true if M |= B^, and with false otherwise. It can be immediately verified that 

Theorem 4.10 Let a,(p e Cm- Let {I,M) be an MBNF model for a and let {P,N) be 
the partition of MA{a) induced by (M, M). Then, (p is satisfied by {I,M,M) iff I \= 
^{obiP,N)). 

Proof. The proof follows immediately from the fact that, by Theorem 4.9, ip{ob{P, N)) = 
(p{Prt{ip, ob{P, N))), and from Lemma 4.6. □ 

We now show that the entailment problem in MBNF is related to the membership 
problem for stable sets (Gottlob, 1995), which in turn is related to the notion of (objective) 
kernel that has been used to characterize stable expansions of autoepistemic theories (Marek 
& Truszczyhski, 1993). 

Definition 4.11 Let tp G C. We denote as ST{tp) the (unique) stable set T C Cb such 
that 

T n C = {(f e C\ip D (f is valid} 

Theorem 4.12 Let a G Cm, ^ G Cg. Then, a ^mbnf ^ iff there exists an MBNF model 
(/, M) for a such that (p ST{ob{P, N)), where {P,N) is the partition of MA{a) induced 
by {M,M). 

Proof. Let M = {I : I \= ob{P, N)}: from the above definition and Definition 3.2, it follows 
immediately that ST{ob{P,N)) = Th{M). Therefore, if 93 G £| then (/,M,M) |= (p iff 
If e ST{ob{P,N)). □ 
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Algorithm MBNF-Not-Entails(cr, ip) 
Input: formula a G Cm^ formula ip ^ Cb\ 
Output: true if cj- ^mbnf false otherwise, 
begin 

if there exists partition (P, N) of MA{a) 
such that 

(a) {P,N) = Prt{E,ob{P,N)) and 

(b) a{P,N) A -^(p{ob{P, N)) is satisfiable and 

(c) for each partition iP',N') / {P,N) of MA{a), 

(cl) a{P', N') is not satisfiable or 

(c2) (P', N') / Prt{E, ob{P', N'), ob{P, N)) or 

(c3) ob{P,N) A -^ob{P',N') is satisfiable 

then return true 

else return false 

end 



Figure 1: Algorithm MBNF-Not-Entails. 
4.2 Reasoning in Propositional MBNF 

We now define a deductive method for reasoning in general propositional MBNF theories. 
Specifically, we present the algorithm MBNF-Not-Entails, reported in Figure 1, for com- 
puting entailment in MBNF. 

The algorithm exploits the finite characterization of MBNF models given by Theorem 4.7 
and an analogous finite characterization, in terms of partitions of MA{a), of all the models 
relevant for establishing whether a partition (P, N) of MA{a) identifies an MBNF model. 

The algorithm checks whether there exists a partition (P, N) of MA{a) satisfying the 
three conditions (a), (b), (c). Intuitively, the partition cannot be self-contradictory (con- 
dition (a)): in particular, the condition (P, iV) = Prt{T,, ob{P,N)) establishes that the 
objective knowledge implied by the partition {P,N) (that is, the formula ob{P,N)) iden- 
tifies a set of interpretations M = {I : I \= ob{P,N)} such that (M, M) induces the same 
partition (P, iV) on MA{a). Moreover, the partition must be consistent with a and -k^ 
(condition (b)): such a condition implies that there exists an interpretation / such that 
both a is satisfied in (/, M, M) and (p is not satisfied in the structure {I,M,M). Finally, 
condition (c) corresponds to check whether such a structure (/, M, M) identifies an MBNF 
model for a according to Definition 2.1, i.e. whether there is no pair {J,M') such that 
M' D M and {J,M',M) satisfies a. Again, the search of such a structure is performed by 
examining whether there exists a partition of MA{a), different from (P, N), which does not 
satisfy any of the conditions (cl), (c2), (c3). 

We illustrate the algorithm through the following simple example. 

Example 4.13 Suppose 

cr = B{ay Bb) A{not{c\/ ^d)y B^notb) Ac 
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if = -nBby {-^b A B{a Ab)) 



Then, MA{a) = {B{a V Bb),Bb, not{c V -^d), B^not b, not b}. Now suppose that (P, N) = 
{Pi,Ni), where 



Then, ct(P, N) = true A (true V false) A c (which is equivalent to c), and ob{P, N) = a V false 
(which is equivalent to a). Now, let M = {/ : / |= a}: it is easy to see that (M, M) 
satisfies the modal atoms in P, while it does not satisfy the modal atoms in N, hence 
{P,N) = PHI'S, ob{P, N)), thus satisfying condition (a) of the algorithm. Then, since 
a D a A 6 is not a valid propositional formula, M ^ B{a A b), hence -'(p{ob{P, N)) = 
-■(true V (-ife A false)), which is equivalent to false. Therefore, a{P, N) A -^ip{ob{P, N)) is not 
satisfiable, thus condition (b) does not hold. 
Suppose now that {P,N) = (P2,A^2), where 



Then, a{P,N) = true A (true V true) Ac (which is equivalent to c), and ob{P,N) = (a V true) A 
fcAtrue, which is equivalent to b. Again, it is easy to see that (P, N) = Prt^E, ob{P, N)), thus 
satisfying condition (a) of the algorithm. Then, since 6 D a A 6 is not a valid propositional 
formula, -!(/?( o6 (P, iV)) = -i(falseV (-i6Afalse)), which is equivalent to true. Hence, a{P,N)A 
-^(p{ob {P, N)) is equivalent to c, which implies that condition (b) holds. Finally, it is easy 
to verify that either condition (cl) or condition (c2) holds for each partition of MA{a) 
different from (P2, N2), with the exception of (Pi, iVi). So let (P', N') = {Pi,Ni): as shown 
before, ob{P', N') is equivalent to a, hence o6(P, N) A -'ob{P', N') is equivalent to 6 A -la, 
therefore condition (c3) holds for (P',iV') = (Pi,iVi), which implies that condition (c) 
holds for {P,N) = {P2,N2). Consequently, MBNF-Not-Entails(cr, c/?) returns true. In fact, 
the partition (P2,iV2) identifies the set of MBNF models for a {I,M) such that / is an 
interpretation satisfying c and M = {I : I \= b}. Each such model does not satisfy the 
query tp: indeed, it can immediately be verified that, for each interpretation /, (/, M, M) ^ 
-^Bb V (^6 A B{a A b)), since M ^ B{a A b) and M \= Bb. □ 

To prove correctness of the algorithm MBNF-Not-Entails we need the following prelim- 
inary lemma. 

Lemma 4.14 Let a G Cm, and let {P,N) be the partition of MA{H) induced by {M',M). 
Let M" = {I : I \= ob{P,N)}. Then, {P,N) is the partition induced by {M",M). 

Proof. The proof is by induction on the depth of the modal atoms of MA(S). Let 

not ip G MA{T,) such that tp G C: then, (M', M) |= not tp iff there exists an interpretation 
I e M such that / ^ ?/', therefore (M',M) |= not ^ iff (M",M) |= not ^. Now let Bip G 
MAiS) such that tp e C: by Definition 4.3, {M',M) \= Bip iff the propositional formula 



Pi 



{B{a V Bb), not{c V -^d), not b} 
{Bb,B^not b} 



P2 
N2 



{B{a V Bb), not{c V ^d), Bb, B^not b} 
{not b} 
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ob{P,N) D ^ is valid, and since M" = {I : I \= ob{P,N)}, it follows that (M',M) |= B^p 
iff {M",M) 1= S^. 

Now suppose that, for each modal atom ^ of depth i, (M',M) ^ ^ iff (M",M) ^ ^, 
and let (P', A?"') denote the partition of the modal atoms in Myl(E) of depth less or equal 
to i induced by {M',M). First, consider a modal atom not ijj of depth i + 1. Then, 
by Lemma 4.6, (M',M) ^ not tp iff (M',M) \= not{xp{P' ,N')) and, by the inductive 
hypothesis and Lemma 4.6, (M",M) ^ no^ ^ iff (M",M) ^ not{'4>{P' ,N')). Then, since 
has depth i, tp{P',N') is a propositional formula, hence (M',M) ^ not{ij{P' , N')) iff 
there exists an interpretation I G M such that / ^ ip{P',N'), which immediately implies 
that {M',M) \= not ip iff (M",M) |= not tp. Now consider a modal atom B^p of depth 
i + L Then, by Lemma 4.6, {M',M) \= Bxp iff {M',M) \= B{7p{P',N')) and, by the 
inductive hypothesis and Lemma 4.6, (M",M) |= B^p iff (M",M) |= B{xp{P' ,N')). By 
Definition 4.3, (M',M) ^ iff the propositional formula ob{P,N) D tp{P',N') is valid, 
and since M" = {/ : / ^ o6(P,Ar)}, it follows that (M',M) ^ P^' iff (M",M) ^ P^, 
which proves the thesis. □ 

We are now ready to prove correctness of the algorithm MBNF-Not-Entails. 
Theorem 4.15 Let a £ Cm, V £ C,b- Then, MBNF- Not- Entails (a, ip) returns true iff 

<^ ^MBNF 

Proof. If part. Suppose a ^mbnf 'P- Then, there exists a pair (/, M) such that (I, M) is 
an MBNF model for a and (/, M, M) ^ ip. Let (P, AT) be the partition of MA{T,) induced 
by (M,M). By Theorem 4.7, M = {I : I \= ob{P,N)}. Therefore, by Definition 4.8, 
{P,N) = Pri(S, o6(P, AT)). Then, since {I,M,M) ^ ip, by Theorem 4.10 it follows that 
/ ^ ip{ob{P,N)), and since {I,M,M) ^ ct, by Lemma 4.6 / ^ <t{P,N), therefore / ^ 
(t(P, iV) A -^(p{ob{P, N)). Now suppose there exists a partition (P', N') of MA(S) such that 
{P',N') ^ {P,N) and none of conditions (cl), (c2), and (c3) holds. Then, since a{P',N') 
is satisfiable, there exists an interpretation J such that J |= a{P' , N'), and since (P', N') = 
Prt{Ti, ob{P' , N'), ob{P,N)), from Lemma 4.6 it follows that there exists an interpretation 
J such that {J,M',M) |= a, where M' = {I : I \= ob{P',N')}. Then, since condition (c3) 
does not hold, the propositional formula ob{P,N) D ob{P',N') is valid, which implies that 
M' D M. Now, if M' = M, then (P', iV') would be the partition induced by (M, M), thus 
contradicting the hypothesis (P', AT') / (P, AT). Hence, M' D M, and since (J, M', M) |= a, 
it follows that (/, M) is not an MBNF model for a. Contradiction. Consequently, condition 
(c) in the algorithm holds, therefore MBNF-Not-Entails((T, ip) returns true. 

Only-if part. Suppose MBNF-Not-Entails (cr, c/?) returns true. Then, there exists a par- 
tition {P,N) of MA{T,) such that conditions (a), (b), and (c) hold. Let M = {/ : / ^ 
ob{P,N)}. Since iP,N) = Prt{E, ob{P, N)), by Definition 4.8 {P,N) is the partition in- 
duced by (M, M). And since (t(P, N)A-'(p{ob{P, N)) is satisfiable, it follows that there exists 
an interpretation I such that / |= a{P,N) and / ^ (p{ob{P, N)), hence, by Lemma 4.6, 
(/, M, M) 1= a and (/, M, M) ^ >p. Now suppose (I, M) is not an MBNF model for cr. 
Then, there exists a set M' and an interpretation J such that M' D M and (J, M', M) |= cr. 
Let (P', AT') be the partition of MA{E) induced by (M', M). Since M = {I : I \= ob{P, N)}, 
it follows that M' contains at least one interpretation J which does not satisfy ob{P,N), 
and since ob{P,N) = I\b^^p ip{P, N), J does not satisfy at least one formula of the form 
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i){P,N) such that Btf^ G P. Therefore, P' / P, which implies that iP',N') / {P,N). 
Then, since {J,M',M) |= a, by Lemma 4.6 J |= a{P',N'), hence (7{P',N') is satisfiable. 
Now let M" = {I : I 1= o6(P', AT')}. By Lemma 4.14, it follows that (P', N') is the partition 
induced by (M",M), therefore, by Definition 4.8, iP',N') = Prt{T,, ob{P',N'), ob{P,N)). 
Moreover, since M' D M, it follows that the propositional formula ob{P,N) D ob{P',N') 
is valid, hence the formula ob{P,N) A -'ob{P' , N') is unsatisfiable. Consequently, {P',N') 
does not satisfy condition (c) in the algorithm, thus contradicting the hypothesis. There- 
fore, (I, M) is an MBNF model for a, and since (/, M, M) ^ (p, it follows that a ^mbnf 
thus proving the thesis. □ 

We point out the fact that the algorithm MBNF-Not-Entails does not rely on a theorem 
prover for a modal logic: thus, "modal reasoning" is not actually needed for reasoning in 
MBNF. This is an interesting peculiarity that MBNF shares with other nonmonotonic 
modal formalisms, like autoepistemic logic (Moore, 1985) or the autoepistemic logic of 
knowledge (Schwarz, 1991). 

4.3 Reasoning in Flat MBNF 

We now study reasoning in flat MBNF theories. The main reason for taking into account the 
flat fragment of MBNF is the fact that reasoning in many of the best known nonmonotonic 
formalisms like default logic, circumscription, and logic programming, can be reduced to 
reasoning in flat MBNF theories (Lifschitz, 1994). 

It is known that, if cj- G and ip G Cg, then it is possible to reduce the entailment 
|=MBNF V to reasoning in logic S^Fmdd, by translating MBNF formulas into unimodal 
formulas of SAFmdd (Schwarz & Truszczyhski, 1994). Thus, the procedure for deciding 
entailment in the logic S^Fmdd presented by Marek and Truszczyhski (1993) can be em- 
ployed for computing the entailment a |=mbnf f - In the following we study a more general 
problem, that is entailment a |=mbnf V in the case a G C\f and (p E Cb, and present a 
specialized algorithm for this problem, which is simpler than the more general reasoning 
method for SAFmdd- 

In Figure 2 we report the algorithm Flat-Not-Entails for computing such an entailment. 
In the algorithm, P„ denotes the subset of modal atoms from P prefixed by the modality 
not, i.e. Pn = {not ip : not tp E P}. 

Informally, correctness of the algorithm Flat-Not-Entails is established by the fact that, 
if (T G C\^, then (a), (b), and (c) are necessary and sufficient conditions on a partition (P, N) 
in order to establish whether it is induced by a pair (M, M) such that there exists an MBNF 
model for a of the form (I, M). In particular, condition (c) states that B{ob{P, N)) must 
be a consequence of a{Pn,N) in modal logic S5,^ since it can be shown that if a{Pn,N) D 
B{ob{P, N)) is not valid in S5, then the guess on the modal atoms of the form B(p in P is 
not minimal. We illustrate this fact through the following example. 

Example 4.16 Let 

a = {Ba A not{c V d)) V {B{a Ah) A ^Bc) V Be 
1. We denote as B the modal operator used in S5. 
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Algorithm Flat-Not-Entails (cr, (f) 
Input: formula a G C\j, formula ip G Cb', 
Output: true if cj- ^mbnf f, false otherwise, 
begin 

if there exists partition (P, N) of MA{a) 
such that 

(a) {P,N) = Prt{E,ob{P,N)) and 

(b) a{P,N) A -^(p{ob{P, N)) is satisfiable and 

(c) a{Pn, N) D B{ob{P, N)) is valid in S5 
then return true 

else return false 
end 



Figure 2: Algorithm Flat-Not-Entails. 



and suppose 



P = {Ba,B{a Ab),not{cV d)} 
N = {Be} 



Then, 

a{Pn,N) = {Ba A true) V {B{a A 6) A ^false) V false, 

which is propositionally equivalent to Ba V B{a Ab), and ob{P, N) = a A (a A 6), which is 
equivalent to a/\b. Now, Ba\/B{a/\b) D B{a/\b) is not valid in S5, which is proved by the fact 
that the set of interpretations M' = {/ : / |= a} is such that M' |= {Bay B{aAb))A^B{aAb). 
Indeed, the set of interpretations M' can be immediately used in order to prove that (P, N) 
does not identify any MBNF model for a. In fact, let M = { J : J |= a A b}: it is immediate 
to see that, for each interpretation /, {I,M',M) |= a, and since M' D M, {I,M) is not an 
MBNF model for a. □ 



Finally, condition (b) corresponds to check whether there exists an interpretation / 
satisfying -'ip{ob{P, N)): in fact, if such an interpretation exists, then (/, M) is an MBNF 
model for a which does not satisfy c/?. 

Therefore, the algorithms MBNF-Not-Entails and Flat-Not-Entails only differ in the 
way in which it is verified whether the MBNF structure associated with a partition (P, N) 
satisfies the preference semantics provided by Definition 2.1, which is implemented through 
condition (c) in both algorithms. In the algorithm MBNF-Not-Entails, a partition is checked 
against all other partitions of MA{a), while in the algorithm Flat-Not-Entails it is sufficient 
to verify that the partition (P, N) satisfies a "local" property. As shown in the next section, 
such a difference refiects the different computational properties of the entailment problem 
in the two cases. 

In order to establish correctness of the algorithm, we need a preliminary lemma. 
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Lemma 4.17 Let a G and let {P,N) be the partition induced by a structure (M, M). 
Then, {I,M) is an MBNF model for a iff for each M' D M the positive formula a{Pn,N) 
is not satisfied by M' . 

Proof. Suppose (/, M) is an MBNF model for cr, and let (P, N) be the partition induced 
by (M,M). Let M' be any set of interpretations such that M' D M. Then, (M',M) ^ cr. 
Since a G and M' D M, this implies that for each modal atom ^ in N, (M',M) ^ ^. 
Moreover, for each modal atom not ip ^ P, (M',M) |= not ij). Therefore, by Lemma 4.6, 
(M',M) ^ a{Pn,N). Now, since a E C\j, a{Pn,N) is a flat positive formula, hence its 
satisfiability only depends on the structure M', therefore M' ^ a{Pn,N). 

Conversely, suppose (/, M) is not an MBNF model for cr, and let (P, N) be the partition 
induced by (M, M). Then, there exists a set of interpretations M' such that M' D M and 
{M',M) 1= a. As shown before, this implies that the positive formula a{Pn,N) is satisfied 
by M'. □ 

As observed in Section 2, the class of universal Kripke structures characterizes modal 
logic S5. This immediately implies the following property. 

Lemma 4.18 A formula if G £^ is valid in S5 iff, for each set of interpretations M, the 
formula -^(p is not satisfied by M. 

Based on the above property, we are now able to prove correctness of the algorithm 
Flat-Not-Entails. 

Theorem 4.19 Let a G and (p G Cb- Then, Flat- Not- Entails (a, (p) returns true iff 

Proof. If-part. If a ^mbnf f, then there exists an MBNF model (/, M) for a such 
that {I,M,M) ^ ip. Let {P,N) be the partition of M^(cr) induced by (M,M). From 
Theorem 4.7 it follows that M = {J : J \= ob{P,N)}. Therefore, by Definition 4.8, 
{P,N) = Prt{Ti, ob{P,N)), hence condition (a) in the algorithm holds. 

Now let a' = a{Pn,N), and suppose the formula cr' D B{ob{P, N)) is not valid in S5. 
Then, since the formula cr' D B{ob{P, N)) belongs to C^, by Lemma 4.18 it follows that 
there exists a set of interpretations M' satisfying a' A -'B{ob{P, N)). Let {P',N') be the 
partition of MA{a') induced by (M',M'), and let M" = {/ : / |= ob{P',N')}. Since 
o6(P, N) = t\BipeMA(a') by Definition 4.3 it follows that o6(P, N) D ob{P' , N') is a valid 
propositional formula, hence M" D M. Now, since by hypothesis M' |= -^B{ob{P, N)), it 
follows that M" D M. Moreover, since cr' G Cb, by Lemma 4.14 it follows that {P',N') is 
the partition induced by (M", M"), and since M' \= a' and cr' is flat, a'{P', N') is equivalent 
to true, therefore M" |= cr'(P', N') and, by Lemma 4.6, M" \= a'. On the other hand, since 
M" D M, by Lemma 4.17 it follows that M" ^ cr'. Contradiction. Hence, a' D B{ob{P, N)) 
is valid in S5, consequently condition (c) of the algorithm holds. 

Finally, since {I,M,M) ^ ^ and M = {J : J \= ob{P,N)}, by Theorem 4.10 it follows 
that / ^ (p{ob{P, N)). Moreover, since (/, M, M) |= cr, from Lemma 4.6 it follows that 
/ 1= a{P,N), consequently I \= a{P, N) A -'ip{ob{P, N)), hence the propositional formula 
a{P, N) A^(p{ob{P, N)) is satisfiable. Therefore, conditions (a), (b), and (c) in the algorithm 
hold, which implies that Flat-Not-Entails (cr, (p) returns true. 
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Only-if-part. If Flat-Not-Entails(cr, 99) returns true, then there exists a partition (P, N) 
of MA{a) for which conditions (a), (b), and (c) of the algorithm hold. Let M = {J : J \= 
ob{P,N)}. By Definition 4.8, {P,N) is the partition of MA{a) induced by (M,M). Now, 
since a{P,N) A -'(p{ob{P, N)) is satisfiable, there exists an interpretation / such that / |= 
a{P,N) and / |= -^(p{ob{P, N)), hence by Lemma 4.6 {I,M,M) \= a, and by Theorem 4.10 
(/, M, M) ^ Lf, therefore we only have to show that (/, M) is an MBNF model for a. So, 
let us suppose (/, M) is not an MBNF model for a. Then, by Lemma 4.17 there exists 
M' D M such that cr(P„, N) is satisfied in M'. Now, condition (c) in the algorithm implies 
that B{ob{P, N)) is a consequence of a{Pn,N) in S5, therefore ob{P, N) is satisfied by each 
interpretation in M', that is, M' C {J : J |= ob{P,N)}, which contradicts the hypothesis 
M' Z) M = {J : J \= ob{P,N)}. Consequently, (/, M) is an MBNF model for a. □ 

We remark the fact that the algorithm Flat-Not-Entails can be seen as a generalization 
of known methods for query answering in Reiter's default logic, Moore's autoepistemic logic, 
and (disjunctive) logic programming under the stable model (and answer set) semantics. In 
particular, condition (c) in the algorithm can be seen as a generalization of the minimality 
check used in (disjunctive) logic programming for verifying stability of a model of a logic 
program (Gelfond t Lifschitz, 1990, 1991). 

5. Complexity Results 

In this section we provide a computational characterization of reasoning in MBNF. 

We first briefiy recall the complexity classes in the polynomial hierarchy, and refer 
to (Johnson, 1990; Papadimitriou, 1994) for further details about the complexity classes 
mentioned in the paper. P"^ (NP"*) is the class of problems that are solved in polynomial 
time by deterministic (nondeterministic) Turing machines using an oracle for A (i.e. that 
solves in constant time any problem in A). The classes S^, n| and A| of the polynomial 
hierarchy are defined by = = = P, and for A; > 0, ^1^^ = NP^fc, nf_^^ = coS^_^^ 

and A^^^ = P^fe . In particular, the complexity class S2 is the class of problems that are 
solved in polynomial time by a nondeterministic Turing machine that uses an NP-oracle, 
and Ilg is the class of problems that are complement of a problem in Sg; while S3 is the 
class of problems that are solved in polynomial time by a nondeterministic Turing machine 
that uses an S2-oracle, and Ilg is the class of problems that are complement of a problem 
in S3. It is generally assumed that the polynomial hierarchy does not collapse: hence, 
a problem in the class S2 or 112 considered computationally easier than a Sg-hard or 
Ilg-hard problem. 

As for the complexity of entailment in MBNF, we start by establishing a lower bound 
for reasoning in propositional MBNF theories. To this end, we exploit the correspondence 
between MBNF and the logic of minimal knowledge S5g (Halpern & Moses, 1985). Indeed, 
as stated by Proposition 2.5, there is a one-to-one correspondence between MBNF models 
and S5g models of positive subjective theories. 

Lemma 5.1 Let a G Cf^ and let ip G Cb- Then, the problem of deciding whether a |=mbnf 
(fi is H^-hard. 
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Proof. As shown by (Donini et al., 1997b), entailment in S5g is n3-complete. Therefore, 
by Proposition 2.5, for subjective (and hence for general) MBNF theories, entailment is 
n^-hard. □ 

Then, we show that the entailment problem in propositional MBNF is complete with 
respect to the class Ilg. 

Theorem 5.2 Let a E Cm and let (p G Cb- Then, the problem of deciding whether 
a |=MBNF is Yi^- complete. 

Proof. Hardness with respect to follows from Lemma 5.1. As for membership in Eg, 
we analyze the complexity of the algorithm MBNF-Not-Entails reported in Figure 1. In 
particular, observe that: 

• given {P,N), the formula ob{P,N) can be computed in polynomial time with respect 
to the size of P. Moreover, by Lemma 4.9 it follows that, since MA{a) has size linear 
with respect to the size of cr, construction of the partition Prt(S, ob{P,N)) can be 
performed through a linear number (with respect to the size of a) of calls to an NP- 
oracle for propositional satisfiability. Therefore, condition (a) can be checked through 
a linear number (in the size of the input) of calls to an NP-oracle; 

• since (p{ob{P, N)) = (p{Prt{(p, ob{P, N))), the formula -^(p{ob{P, N)) can be computed 
in time linear with respect to the size of A ob{P, N) using an NP-oracle. And since, 
given a and {P,N), a{P,N) can be computed in polynomial time with respect to 
the size of the input, it follows that condition (b) can be computed through a linear 
number (in the size of the input) of calls to an NP-oracle; 

• given a partition {P',N'), each of the conditions (cl), (c2) and (c3) (analogous to 
conditions (a) and (b)) can be checked in polynomial time, with respect to the size of 
a, using an NP-oracle. Therefore, since the guess of the partition {P',N') of MA{a) 
requires a nondeterministic choice, falsity of condition (c) can be decided in S2, which 
implies that verifying whether condition (c) holds can be decided in Hg. 

Since the guess of the partition (P, N) of MA{a) requires a nondeterministic choice, it 
follows that the algorithm MBNF-Not-Entails, if considered as a nondeterministic proce- 
dure, decides a ^mbnf in nondeterministic polynomial time (with respect to the size of 
a A If), using a S2-oracle. Thus, we obtain an upper bound of S3 for the non-entailment 
problem, which implies that entailment in MBNF is in Hg. □ 

The previous analysis also allows for a computational characterization of the logic MKNF 
(Lifschitz, 1991), which is a slight modification of MBNF. Indeed, it is known (Lifschitz, 
1994) that, for each theory S C C^, M is an MKNF model of S iff, for each interpretation 
/, (/, M) is an MBNF model of the subjective theory S' = {B(p : 97 G S}. Therefore, from 
Proposition 2.5 and from Ilg-hardness of entailment in S5g (Donini et al., 1997b), it follows 
that entailment in MKNF is Ilg-hard. Then, since S |=mknf f iff S' |=mbnf (Lifschitz, 
1994), it follows that entailment in MKNF can be polynomially reduced to entailment in 
MBNF, hence such a problem belongs to Ilg. Therefore, the following property holds. 

Theorem 5.3 Entailment in propositional MKNF is H^-complete. 
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Finally, the previous theorem provides a computational characterization of the logic of 
grounded knowledge and justified assumptions GK (Lin & Shoham, 1992). In fact, the 
logic GK can be considered as a syntactic variant of the propositional fragment of MKNF. 
Therefore, skeptical entailment in GK is Hg-complete. 

Remark. The computational properties of MBNF and its variants relate such formalisms 
to ground nonmonotonic modal logics (Eiter &l Gottlob, 1992; Donini et al., 1997b; Rosati, 
1999). Notably, ground nonmonotonic modal logics share with MBNF the interpretation in 
terms of minimal knowledge (or minimal belief) of the modality B; specifically, as already 
mentioned, the propositional fragment of MBNF can be considered as built upon S5g by 
adding a second modality not. Therefore, it turns out that, in the propositional case, adding 
a "negation by default" modality to the S5 logic of minimal knowledge does not increase 
the computational complexity of reasoning, while adding a minimal knowledge modality to 
AEL does increase the complexity of deduction. We can thus summarize as follows: minimal 
knowledge is computationally harder than negation as failure. □ 

We now study the complexity of entailment for flat MBNF theories. First, it is known 
that, in the case of flat MBNF theories and subjective queries, entailment is Ilf-complete: 
membership in the class ^ consequence of the fact that flat MKNF theories can 

be polynomially embedded into McDermott and Doyle's nonmonotonic modal logic S4F 
(Schwarz &: Truszczyhski, 1994, Proposition 3.2), whose entailment problem is n2-complete 
(Marek & Truszczynski, 1993), while H^-hardness follows from the existence of a polynomial- 
time embedding of propositional default theories into flat MBNF theories (Lifschitz, 1994). 
Therefore, the following property holds. 

Proposition 5.4 Let a G £.\j and let ip G Then, the problem of deciding whether 

c |=MBNF Tl^- complete. 

As for complexity of entailment of generic queries with respect to flat MBNF theories, 
we analyze the complexity of the algorithm Flat-Not-Entails reported in Figure 2. As shown 
before, both condition (a) and condition (b) can be checked through a linear number (with 
respect to the size of the input) of calls to an NP-oracle. Moreover, validity in modal logic 
S5 is a coNP-complete problem (Halpern &: Moses, 1992). Hence, each of the conditions in 
the algorithm can be computed through a number of calls to an oracle for the propositional 
validity problem which is polynomial in the size of the input, and since the guess of the 
partition (P, N) of MA{a) requires a nondeterministic choice, it follows that the algorithm 
runs in Therefore, the following property holds. 

Theorem 5.5 Let a G and let (p G Cb- Then, the problem of deciding whether 
a |=MBNF f is Yi^- complete. 

Proof. Membership of the problem to the class Ilg is implied by the algorithm Flat-not- 
entails, whereas Hg-hardness is implied by Proposition 5.4. □ 

Hence, the algorithm Flat-Not-Entails is "optimal" in the sense that it matches the 
lower bound for the entailment problem. 
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Finally, we remark that the subset of flat MBNF theories in conjunctive normal form 
can be seen as a further extension of the framework of generalized logic programming intro- 
duced by Inoue and Sakama (1994), which in turn is an extension of the disjunctive logic 
programming framework under the stable model semantics (Gelfond &: Lifschitz, 1991). 
Roughly speaking, flat MBNF theories in conjunctive normal form correspond to rules of 
generalized logic programs in which propositional formulas (instead of literals) are allowed 
as goals. The above computational characterization implies that such an extension of the 
framework of logic programming under the stable model semantics does not affect the worst- 
case complexity of the entailment problem, which is n2-complete just like entailment in logic 
programs with disjunction under the stable model semantics (Eiter &: Gottlob, 1995). Such 
a result extends analogous properties (Marek, Truszczyhski, & Rajasekar, 1995) to the case 
of disjunctive logic programs. 

6. Conclusions 

In this paper we have investigated the problem of reasoning in the propositional fragment 
of MBNF. The main results presented can be summarized as follows: 

• the negation as failure modality not of MBNF exactly corresponds to negative intro- 
spection in AEL. This implies that the logic MBNF can be viewed as the conservative 
extension of two different nonmonotonic modal logics: Halpern and Moses' logic of 
minimal knowledge S5g and Moore's AEL; 

• reasoning in the propositional fragment of MBNF lies at the third level of the polyno- 
mial hierarchy, hence (unless the polynomial hierarchy does not collapse) reasoning in 
MBNF is harder than reasoning in the best known propositional nonmonotonic logics, 
like default logic, autoepistemic logic, and circumscription; 

• we have defined methods for reasoning in MBNF, which subsume and generalize well- 
known nonmonotonic reasoning algorithms used in logic programming (Gelfond &: 
Lifschitz, 1991), default logic (Gottlob, 1992), and autoepistemic logic (Marek & 
Truszczynski, 1993); 

• we have studied the flat fragment of MBNF and its relationship with the logic pro- 
gramming paradigm. 

As for the computational aspects of reasoning in MBNF, the results presented in Sec- 
tion 5 prove that one source of complexity is due to the presence of nested occurrences of 
modalities in the theory, since reasoning in flat MBNF is computationally easier than in 
the general case. 

It can be proven that another source of complexity lies in the underlying objective 
language. In fact, if we consider C to be a tractable fragment of propositional logic, then 
the complexity of reasoning in the modal language C'j^ built upon C is lower than in the 
general case. In particular, it is easy to see that, under the assumption that entailment 
in C can be computed in polynomial time, the algorithm MBNF-Not-Entails provides an 
upper bound of 112 MBNF-entailment in the fragment C'j^. 
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One possible development of the present work is towards the analysis of reasoning about 
minimal belief and negation as failure in a first-order setting: in particular, it should be 
interesting to see whether it is possible to extend the techniques developed for the propo- 
sitional case to a more expressive language. A first attempt in this direction is reported by 
Donini et al. (1997a). 
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